NetSight
critical9.8

CVE-2025-50722

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

Impact

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

Affected products

VendorProductAffected versions
SparkshopSparkshop
Version 1.1.7

Weakness classification

References